Privacy Policy

This explains what information IronDesk keeps, why, and how we protect it. In short: your gym's data is yours, we use it only to run IronDesk for you, and we never sell it.

1. Who is responsible

Each gym decides what it records about its members and staff and is responsible for that information. IronDesk (Mamudou Saho, The Gambia) stores and processes it on the gym's behalf, and is responsible for the account details gyms give us when they sign up.

2. What we keep

• Gym and staff accounts: gym name, address, phone, logo; staff names, emails, phone numbers, roles. Passwords are stored scrambled (hashed); nobody can read them, not even us.
• What gyms enter about members: names, phone, email, emergency contact, health notes, photos and ID pictures (Premium), plans, payments, balances and check-in times.
• Payments to IronDesk: plan, amount, method and the transaction reference you give us.
• Security records: failed login attempts and the connection they came from, kept for a short time to stop password guessing.

3. How we use it

• To run IronDesk for your gym: show your members, payments and reports to your own staff.
• To manage your IronDesk account and payments, and to contact you about them.
• To keep the service secure and fix problems.

We do not sell data, show ads, or use your members' information for anything else.

4. Who can see it

• Only your gym's staff, with what their role allows (for example, trainers don't see money).
• Each gym's data is kept separate; one gym can never see another's.
• IronDesk only looks at a gym's data when needed to support you or keep the service running.
• Our service providers that store it for us: our hosting (Vercel), database (Neon) and photo storage (Cloudinary). Their servers may be outside The Gambia; they are bound to protect it.
• Authorities, only if the law requires it.

5. How long we keep it

As long as your gym uses IronDesk. If you stop and ask us to delete your account, we delete your gym's data; copies in our backups disappear as those backups are replaced, within 30 days.

6. Your choices

• Gyms can view, correct and export their data (CSV / PDF reports) at any time.
• Members who want to see, correct or remove their details should ask their gym; we help gyms do this.
• You can ask us any question about your data using the contact below.

7. Cookies

IronDesk uses one cookie to keep you logged in and a few small settings saved in your browser (light or dark theme, sidebar, pinned reports). No advertising or tracking cookies.

8. Changes

If we change this policy, we'll update the date above and tell you in the app about important changes.